$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS148996.roa File: AS148996.roa (raw, json) Hash identifier: ZnMXv5b1geOEhnLX5L1Rq34UGDbv0MEJjTifLBtEe08= Subject key identifier: 50:38:AA:68:F3:30:99:4F:D7:3E:EB:65:A7:F5:66:07:D4:4A:DC:AA Certificate issuer: /CN=60D5CF86368D32D8BD736410814916DA300E83CF Certificate serial: 7FAA38B9C0AC4184E35ADB388A166D179D6F4371 Authority key identifier: 60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS148996.roa Signing time: Mon 14 Sep 2026 17:29:55 +0000 ROA not before: Mon 14 Sep 2026 17:24:55 +0000 ROA not after: Mon 13 Sep 2027 17:29:55 +0000 asID: 148996 IP address blocks: 177.177.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.mft rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:aa:38:b9:c0:ac:41:84:e3:5a:db:38:8a:16:6d:17:9d:6f:43:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60D5CF86368D32D8BD736410814916DA300E83CF Validity Not Before: Sep 14 17:24:55 2026 GMT Not After : Sep 13 17:29:55 2027 GMT Subject: CN=5038AA68F330994FD73EEB65A7F56607D44ADCAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:55:51:71:cb:20:67:7d:92:e7:af:c4:e5: ed:62:ed:0a:8a:db:c2:84:36:78:84:ba:5d:fd:69: 1a:b0:21:14:0e:b0:55:4d:d7:fd:fc:2b:42:8c:87: 98:49:99:60:e2:a7:4b:ff:c7:df:13:62:f4:98:10: 55:77:e4:2c:72:0f:d5:50:9f:27:d8:0c:26:ef:7a: e1:14:dc:0d:07:9e:53:4b:e8:3e:4e:b1:34:0b:91: 0b:66:f3:de:b0:d8:be:52:5c:54:ac:2a:d8:0f:86: 5b:b6:06:8d:bf:e1:ad:93:f5:b3:37:b8:f3:8b:b9: 54:86:6e:4a:98:bf:ab:b1:36:1c:f0:95:24:50:3c: bb:c7:f7:46:6c:87:9a:38:82:34:e3:29:51:6f:f8: 79:f6:48:26:78:a0:33:14:a5:8d:81:7e:a6:cb:8b: e1:3f:64:a2:e2:89:9e:b3:4a:10:22:6d:32:19:ff: fa:76:1c:29:06:f1:01:40:fd:5d:31:ca:37:10:98: 9b:f2:35:5c:08:9b:30:6d:2f:39:80:e8:34:3a:97: 76:57:a3:92:9c:89:43:85:a9:d4:fa:a6:9f:2f:cc: 40:7f:80:06:fd:5a:b8:d6:39:5f:ef:8c:28:a1:1a: 0d:d0:e7:e3:20:b0:ba:9c:7c:67:25:ae:de:c0:89: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:38:AA:68:F3:30:99:4F:D7:3E:EB:65:A7:F5:66:07:D4:4A:DC:AA X509v3 Authority Key Identifier: keyid:60:D5:CF:86:36:8D:32:D8:BD:73:64:10:81:49:16:DA:30:0E:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/60D5CF86368D32D8BD736410814916DA300E83CF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/60D5CF86368D32D8BD736410814916DA300E83CF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0723846f-9e1f-4548-9a82-a4be47cbc6b6/0/AS148996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.177.244.0/24 Signature Algorithm: sha256WithRSAEncryption 24:f8:be:39:65:dd:47:4e:d2:66:08:aa:fa:c2:76:ba:5e:e7: 95:9b:7f:87:57:bc:ab:6c:7d:c1:b5:27:85:47:bb:e9:07:51: 48:8b:04:cf:8c:e4:68:72:3d:0e:bc:c2:df:e7:35:6a:09:86: c6:20:53:86:e7:6c:79:0e:7b:1d:b9:a3:ad:a2:98:90:9f:9a: d0:d6:14:12:c7:14:de:f2:69:0e:6e:81:37:ca:7d:ee:24:c4: dd:21:64:8e:a4:52:fb:bd:28:d8:78:39:ce:39:3b:31:03:0d: 95:6e:b6:e2:d9:ca:6b:89:63:1c:b1:28:9e:76:e3:e9:d1:cb: 25:eb:e3:28:02:e1:86:21:8e:99:ff:49:bf:95:62:57:e3:fe: d4:6b:45:d5:1a:f3:5f:a7:55:73:6c:4e:ea:5f:c2:d1:66:3a: 36:94:f7:3d:8f:47:9f:20:66:ec:47:d9:15:36:62:02:c7:0f: c1:83:96:6c:88:0e:9d:22:08:25:30:31:3f:59:84:05:ec:f3: 55:a8:78:3c:40:d9:f4:77:a8:b9:a5:7c:b1:35:4a:5e:d5:c8: bc:24:84:35:b1:2b:b7:e5:b7:79:80:c3:31:d1:2b:00:1f:b6: 38:e5:c9:fd:df:7d:6d:9a:f7:76:fb:0c:63:24:1b:2b:08:08: 77:92:0d:d3 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUf6o4ucCsQYTjWts4ihZtF51vQ3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEz MDBFODNDRjAeFw0yNjA5MTQxNzI0NTVaFw0yNzA5MTMxNzI5NTVaMDMxMTAvBgNV BAMTKDUwMzhBQTY4RjMzMDk5NEZENzNFRUI2NUE3RjU2NjA3RDQ0QURDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkjlVRccsgZ32S56/E5e1i7QqK 28KENniEul39aRqwIRQOsFVN1/38K0KMh5hJmWDip0v/x98TYvSYEFV35CxyD9VQ nyfYDCbveuEU3A0HnlNL6D5OsTQLkQtm896w2L5SXFSsKtgPhlu2Bo2/4a2T9bM3 uPOLuVSGbkqYv6uxNhzwlSRQPLvH90Zsh5o4gjTjKVFv+Hn2SCZ4oDMUpY2BfqbL i+E/ZKLiiZ6zShAibTIZ//p2HCkG8QFA/V0xyjcQmJvyNVwImzBtLzmA6DQ6l3ZX o5KciUOFqdT6pp8vzEB/gAb9WrjWOV/vjCihGg3Q5+MgsLqcfGclrt7AiRJ7AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUUDiqaPMwmU/XPutlp/VmB9RK3KowHwYDVR0j BBgwFoAUYNXPhjaNMti9c2QQgUkW2jAOg88wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDcyMzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2Jj NmI2LzAvNjBENUNGODYzNjhEMzJEOEJENzM2NDEwODE0OTE2REEzMDBFODNDRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0wN2I5LTQy OGMtYWY3NC05NjE0OWU4OTE4ODQvMC82MEQ1Q0Y4NjM2OEQzMkQ4QkQ3MzY0MTA4 MTQ5MTZEQTMwMEU4M0NGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDcy Mzg0NmYtOWUxZi00NTQ4LTlhODItYTRiZTQ3Y2JjNmI2LzAvQVMxNDg5OTYucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACxsfQwDQYJKoZIhvcNAQELBQADggEBACT4vjll3UdO0mYIqvrCdrpe 55Wbf4dXvKtsfcG1J4VHu+kHUUiLBM+M5GhyPQ68wt/nNWoJhsYgU4bnbHkOex25 o62imJCfmtDWFBLHFN7yaQ5ugTfKfe4kxN0hZI6kUvu9KNh4Oc45OzEDDZVutuLZ ymuJYxyxKJ524+nRyyXr4ygC4YYhjpn/Sb+VYlfj/tRrRdUa81+nVXNsTupfwtFm OjaU9z2PR58gZuxH2RU2YgLHD8GDlmyIDp0iCCUwMT9ZhAXs81WoeDxA2fR3qLml fLE1Sl7VyLwkhDWxK7flt3mAwzHRKwAftjjlyf3ffW2a93b7DGMkGysICHeSDdM= -----END CERTIFICATE-----Generated at Tue Sep 22 18:34:22 2026 by rpki-client